d7f3a5f811
* internal,lib,uplink: add monkit task to missing places Change-Id: I490053eee4ed517502f9fe00c6394f0095bd13d0 * Include Monkit * Add missing context * Another missing ctx * More ctx missing * Linting * go imports Change-Id: Ibf0ed072eba339f027727ed8039f7bce1f223fa7 * fix semantic merge conflict Change-Id: I67fb1f4e7b6cd5e89d69987ed7b3966b7d30ee37
45 lines
1.4 KiB
Go
45 lines
1.4 KiB
Go
// Copyright (C) 2019 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package piecestore
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
|
|
"github.com/zeebo/errs"
|
|
|
|
"storj.io/storj/pkg/auth/signing"
|
|
"storj.io/storj/pkg/identity"
|
|
"storj.io/storj/pkg/pb"
|
|
)
|
|
|
|
var (
|
|
// ErrInternal is an error class for internal errors.
|
|
ErrInternal = errs.Class("internal")
|
|
// ErrProtocol is an error class for unexpected protocol sequence.
|
|
ErrProtocol = errs.Class("protocol")
|
|
// ErrVerifyUntrusted is an error in case there is a trust issue.
|
|
ErrVerifyUntrusted = errs.Class("untrusted")
|
|
)
|
|
|
|
// VerifyPieceHash verifies piece hash which is sent by peer.
|
|
func (client *Client) VerifyPieceHash(ctx context.Context, peer *identity.PeerIdentity, limit *pb.OrderLimit2, hash *pb.PieceHash, expectedHash []byte) (err error) {
|
|
defer mon.Task()(&ctx)(&err)
|
|
if peer == nil || limit == nil || hash == nil || len(expectedHash) == 0 {
|
|
return ErrProtocol.New("invalid arguments")
|
|
}
|
|
if limit.PieceId != hash.PieceId {
|
|
return ErrProtocol.New("piece id changed") // TODO: report grpc status bad message
|
|
}
|
|
if !bytes.Equal(hash.Hash, expectedHash) {
|
|
return ErrVerifyUntrusted.New("hashes don't match") // TODO: report grpc status bad message
|
|
}
|
|
|
|
if err := signing.VerifyPieceHashSignature(ctx, signing.SigneeFromPeerIdentity(peer), hash); err != nil {
|
|
return ErrVerifyUntrusted.New("invalid hash signature: %v", err) // TODO: report grpc status bad message
|
|
}
|
|
|
|
return nil
|
|
}
|